Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDD6D9BCF4A411EFA446787D762E951A.roa
File: FDD6D9BCF4A411EFA446787D762E951A.roa (raw, json)
Hash identifier: lI10oacoPHvmCLmuh0iPKoDcZs4VcXSnFr1Xb6rLhw0=
Subject key identifier: CD:5E:15:43:55:21:92:0A:11:EC:FD:92:9E:B8:29:04:10:2A:D0:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016615
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDD6D9BCF4A411EFA446787D762E951A.roa
Signing time: Thu 27 Feb 2025 00:51:34 +0000
ROA not before: Thu 27 Feb 2025 00:00:30 +0000
ROA not after: Thu 19 Feb 2026 00:00:30 +0000
asID: 984
IP address blocks: 154.200.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91669 (0x16615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 00:00:30 2025 GMT
Not After : Feb 19 00:00:30 2026 GMT
Subject: CN=67bfb716-0b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:09:b6:b4:2e:80:79:d5:b1:18:47:1a:47:0f:
42:e3:35:25:93:ed:08:47:c6:dc:c5:a3:96:cd:9e:
3e:98:e4:35:b4:58:b1:d7:8d:5a:59:1f:da:66:77:
37:40:b3:28:15:f3:2b:e1:c4:ce:df:a4:54:76:aa:
d5:f7:89:8c:e3:63:fd:17:b0:e8:79:ba:7c:a1:98:
c2:a4:57:2a:76:bd:ab:9d:06:24:4c:75:53:a3:0b:
2f:ca:41:b6:73:b1:b2:d6:3d:21:13:4f:d5:3d:38:
66:b2:8c:24:5b:e0:98:9c:ac:40:b9:ae:bf:ca:45:
6e:7f:aa:b2:b5:26:3f:8f:a8:f7:a2:ff:a8:10:ce:
9e:d0:9f:b6:08:4c:f0:76:4e:d9:ba:17:12:44:3e:
87:38:90:6c:68:46:f9:af:31:8c:b4:ca:dc:aa:75:
ea:3d:0c:44:7e:42:75:d8:d8:b1:78:33:93:3d:f0:
ed:fb:4d:19:d7:13:2f:e0:4d:17:cb:ea:3e:32:96:
57:b2:44:6e:4d:a9:de:8b:26:3e:11:25:ff:b0:e2:
f7:74:e1:55:e7:7f:cb:10:06:a5:08:7a:e1:0d:98:
85:ad:de:a0:fd:2b:6c:1f:b8:9f:51:58:fe:df:ad:
cd:73:42:e6:1e:21:58:91:4f:1a:9f:ea:bd:ab:0c:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:15:43:55:21:92:0A:11:EC:FD:92:9E:B8:29:04:10:2A:D0:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDD6D9BCF4A411EFA446787D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.65.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3c:66:17:ba:8d:b7:1a:dc:93:5d:15:b2:cd:db:cb:f2:d4:
76:06:3e:aa:fd:75:28:e5:f7:7e:c4:e5:57:fb:c9:85:25:5a:
1d:fb:0d:ca:26:e2:15:95:d0:02:87:fe:e7:0c:82:22:19:5a:
21:11:2e:43:7a:a4:b2:b3:f4:9a:9a:44:08:b5:c2:b6:c0:21:
da:d9:64:a8:f6:60:db:cf:5f:81:7e:41:63:fa:fb:c3:fc:a4:
2b:85:d2:54:96:75:82:0b:c4:45:e5:f3:e6:c5:bf:05:7f:d8:
b6:b7:77:76:dc:c2:ad:23:18:57:1e:f7:e1:a4:bf:c7:f1:a7:
e8:c7:c1:12:bf:45:a3:f8:c1:37:58:2c:c0:a3:f9:0c:83:61:
48:92:2b:00:3c:81:7d:27:bc:06:fb:11:ac:19:5b:73:e0:13:
c5:9c:12:70:fe:18:4e:0a:6e:d3:f5:bd:6e:00:d0:fe:59:b6:
93:fb:51:d2:32:d4:74:4c:09:e6:b5:1e:c6:1d:83:c4:0e:1d:
2b:09:81:7b:7f:38:12:58:8d:de:7e:8e:21:9e:bd:74:39:45:
a8:76:10:9e:58:a3:d6:91:22:39:f5:74:34:5d:7d:25:10:1c:
f6:ff:cb:42:71:2a:56:e7:99:93:77:7d:c3:9f:24:db:9c:5d:
08:71:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:08 2025 by rpki-client